$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft File: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft (raw, json) Hash identifier: E7boT+COyvxrQoXzHxXfjaPkg6QErmM0jVHzL/K4A84= Subject key identifier: F5:9A:62:3B:4D:C1:38:35:3A:E7:A6:2F:27:CE:02:C6:D8:E6:A6:3E Authority key identifier: 4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79 Certificate issuer: /CN=A916CDAC/serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft Manifest number: 1C Signing time: Wed 05 Nov 2025 08:00:17 +0000 Manifest this update: Wed 05 Nov 2025 08:00:17 +0000 Manifest next update: Wed 12 Nov 2025 08:00:16 +0000 Files and hashes: 1: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl (hash: 5iw5yMhs8eMKvZkvxl3nnpMptpieSlWZL5pjZXUF/Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479 Validity Not Before: Nov 5 08:00:17 2025 GMT Not After : Nov 12 08:00:16 2025 GMT Subject: CN=690b0411-2248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b3:73:dd:89:8f:05:2d:5c:ed:41:42:27:db: 89:6c:c9:c7:77:dc:01:43:07:f4:0f:f3:23:d1:97: 0e:06:3a:a0:48:fd:22:d7:85:3d:e1:de:63:a6:92: 8e:1f:bb:19:40:b8:83:ba:db:47:ef:0b:ec:0f:a8: 3a:27:93:aa:c2:8f:7c:e0:93:c7:52:65:71:30:94: 25:f6:06:31:02:cb:1c:d7:a4:97:3a:ef:ca:da:65: 0b:71:00:be:4b:bc:cc:18:52:5e:7f:a1:0d:2f:70: b7:98:ac:18:c5:d5:af:7d:a5:02:04:0d:30:ea:75: 9e:31:47:0a:ab:d7:e1:48:3a:d7:b3:6a:d5:1d:95: 22:4f:a1:43:61:01:26:97:9e:01:8e:97:52:e3:94: b9:b5:d5:ca:8b:a8:59:18:ce:0b:fe:d7:46:9d:a9: 23:d3:76:34:7f:c2:d7:58:81:ce:c9:3b:75:7c:57: 6e:d8:11:d6:21:aa:e7:d4:39:4c:8f:50:2e:1c:7c: e9:71:ec:8a:5a:58:f4:9c:bd:00:ad:5b:b2:40:94: 7d:84:a1:7e:62:85:30:3c:49:00:2c:83:a9:d9:f8: 25:a5:46:6c:df:10:79:a2:85:dc:84:97:e1:76:34: c1:f9:47:29:9d:41:17:31:56:6d:d9:72:51:f6:1d: 0d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9A:62:3B:4D:C1:38:35:3A:E7:A6:2F:27:CE:02:C6:D8:E6:A6:3E X509v3 Authority Key Identifier: keyid:4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:24:42:2a:d7:cd:a7:25:00:66:04:af:ac:1a:04:b1:5e:77: 46:20:b5:d1:ce:c1:06:bd:9c:73:89:86:b3:60:f3:ac:94:8f: eb:c4:5a:31:73:7c:c9:33:4f:43:fe:74:55:7d:82:d5:c7:e4: 32:c3:0b:ac:af:cf:f9:9e:77:f9:ba:fc:9d:63:14:8f:c9:aa: 23:b9:1b:86:41:fb:11:45:54:19:02:c4:ba:b1:1e:b4:2e:6c: 93:be:51:1b:37:9d:b3:44:89:16:3e:7a:d8:68:8b:d8:98:81: 34:3c:3c:96:9a:c8:7d:70:7f:07:e2:ee:49:91:d7:8d:d9:d5: 62:5b:fa:7a:4b:b8:f0:32:98:7f:c9:67:44:1e:34:c1:86:4f: 24:a7:ae:3c:c7:38:31:11:16:30:f6:7a:2d:90:88:32:6d:04: 44:42:f0:27:f3:64:3c:cf:8e:8c:c4:b9:70:de:6c:81:ca:65: 71:7a:68:4b:d8:32:f3:2c:57:18:c3:d2:8d:30:1f:4b:15:fc: f4:48:87:6c:35:14:27:06:9d:64:e6:5d:3f:27:fa:ac:9f:bc: dd:5a:04:3b:ff:b1:60:09:fd:58:d3:6b:28:f3:7e:5a:31:ed: 39:2c:34:0f:06:31:cb:78:90:e2:99:70:13:52:b3:b7:a8:1c: cb:f1:24:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoNEE0Mzg5RkU5MUY5QTEyNEM3NzZGODlCQjIxRUUwN0Mz RTdFNjQ3OTAeFw0yNTExMDUwODAwMTdaFw0yNTExMTIwODAwMTZaMBgxFjAUBgNV BAMTDTY5MGIwNDExLTIyNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDis3PdiY8FLVztQUIn24lsycd33AFDB/QP8yPRlw4GOqBI/SLXhT3h3mOmko4f uxlAuIO620fvC+wPqDonk6rCj3zgk8dSZXEwlCX2BjECyxzXpJc678raZQtxAL5L vMwYUl5/oQ0vcLeYrBjF1a99pQIEDTDqdZ4xRwqr1+FIOtezatUdlSJPoUNhASaX ngGOl1LjlLm11cqLqFkYzgv+10adqSPTdjR/wtdYgc7JO3V8V27YEdYhqufUOUyP UC4cfOlx7IpaWPScvQCtW7JAlH2EoX5ihTA8SQAsg6nZ+CWlRmzfEHmihdyEl+F2 NMH5RymdQRcxVm3ZclH2HQ1dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9ZpiO03B ODU656YvJ84Cxtjmpj4wHwYDVR0jBBgwFoAUSkOJ/pH5oSTHdvibsh7gfD5+ZHkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzgyQzBBQTIwOEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyL1NrT0pfcEg1b1NUSGR2aWJzaDdnZkQ1LVpI ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2tPSl9wSDVvU1RIZHZpYnNoN2dmRDUtWkhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD REFDLzgyQzBBQTIwOEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyL1NrT0pfcEg1b1NU SGR2aWJzaDdnZkQ1LVpIay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG4kQirXzaclAGYEr6waBLFed0YgtdHOwQa9nHOJhrNg86yUj+vEWjFz fMkzT0P+dFV9gtXH5DLDC6yvz/med/m6/J1jFI/JqiO5G4ZB+xFFVBkCxLqxHrQu bJO+URs3nbNEiRY+ethoi9iYgTQ8PJaayH1wfwfi7kmR143Z1WJb+npLuPAymH/J Z0QeNMGGTySnrjzHODERFjD2ei2QiDJtBERC8CfzZDzPjozEuXDebIHKZXF6aEvY MvMsVxjD0o0wH0sV/PRIh2w1FCcGnWTmXT8n+qyfvN1aBDv/sWAJ/VjTayjzflox 7TksNA8GMct4kOKZcBNSs7eoHMvxJOs= -----END CERTIFICATE-----Generated at Thu Nov 6 03:47:35 2025 by rpki-client